Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3471 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-49185 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3472 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49186 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3473 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-49187 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3474 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるアクティブ状態のデバッグコードに関する脆弱性 CWE-489
間違ったセッションへのデータの漏洩 		CVE-2026-49188 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3475 7.8 重要
Local 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-49189 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3476 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-49190 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3477 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49191 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3478 5.4 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-49192 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3479 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-49193 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
3480 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49194 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345051 - bl4 smtp_server Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3)… NVD-CWE-Other
CVE-2006-2107 2018-10-19 01:38 2006-04-29 Show GitHub Exploit DB Packet Storm
345052 - jsboard jsboard Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to injec… NVD-CWE-Other
CVE-2006-2109 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345053 - jsboard jsboard This vulnerability is addressed in the following product release: JSBoard, JSBoard, 2.0.12 NVD-CWE-Other
CVE-2006-2109 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345054 - microsoft outlook_express A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported … CWE-200
Information Exposure 		CVE-2006-2111 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345055 - dell
fuji_xerox 		3000cn
3010cn
3100cn
3110cn
5100cn
5110cn
docuprint_181
docuprint_181_network_option_card
docuprint_211
docuprint_211_network_option_card
docuprint_c1616
docuprint_c1… 		Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware be… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-2112 2018-10-19 01:38 2006-08-25 Show GitHub Exploit DB Packet Storm
345056 - dell
fuji_xerox 		3000cn
3010cn
3100cn
3110cn
5100cn
5110cn
docuprint_181
docuprint_181_network_option_card
docuprint_211
docuprint_211_network_option_card
docuprint_c1616
docuprint_c1… 		The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Net… CWE-287
Improper Authentication 		CVE-2006-2113 2018-10-19 01:38 2006-08-25 Show GitHub Exploit DB Packet Storm
345057 - sws sws_simple_web_server Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request. NVD-CWE-Other
CVE-2006-2114 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345058 - sws sws_simple_web_server Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call. NVD-CWE-Other
CVE-2006-2115 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345059 - planet_concept planetgallery planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php. NVD-CWE-Other
CVE-2006-2116 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm
345060 - extrosoft thyme Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page. NVD-CWE-Other
CVE-2006-2117 2018-10-19 01:38 2006-05-2 Show GitHub Exploit DB Packet Storm